OpenSSF Releases Open Source Project Security Baseline

The Open Source Security Foundation (OpenSSF) has announced the initial release of the Open Source Project Security Baseline (OSPS Baseline). This new initiative is designed to help open source projects enhance their security posture through a set of tiered best practices. The OSPS Baseline aligns with global cybersecurity frameworks, including the EU Cyber Resilience Act (CRA) and the NIST Secure Software Development Framework (SSDF), making it easier for maintainers and contributors to adopt practical security measures. Early adopters of the OSPS Baseline include projects such as GUAC, OpenVEX, bomctl, and Open Telemetry.